HIGHCVSS 7.5EPSS 0.7%

CVE-2026-23490

CVE-2026-23490 updated by NVD

Published: 2026-01-16
Modified: 2026-07-23
EPSS percentile: 49%
Sources: github-advisory, nvd

Summary

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	pyasn1	—	0.6.2

Remediation: Upgrade to 0.6.2 or later.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-23490

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.